Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hlE2j5Dae3v8w7EH-EZ7kjSCVr0.roa
File: hlE2j5Dae3v8w7EH-EZ7kjSCVr0.roa (raw, json)
Hash identifier: +iTNVi8I4kQkrkLVtBa2CfN6UHv0sqTxqV5C/wcWvWk=
Subject key identifier: 86:51:36:8F:90:DA:7B:7B:FC:C3:B1:07:F8:46:7B:92:34:82:56:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878509242F67792D95B3D93BBD54D5072A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hlE2j5Dae3v8w7EH-EZ7kjSCVr0.roa
Signing time: Sat 15 Apr 2023 13:09:41 +0000
ROA not before: Sat 15 Apr 2023 13:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:85:09:24:2f:67:79:2d:95:b3:d9:3b:bd:54:d5:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 13:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8651368f90da7b7bfcc3b107f8467b92348256bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:75:5b:f0:3f:c1:9d:5d:1c:fd:00:0c:92:
4b:b8:ea:74:6b:65:0d:d5:46:fd:84:c2:6b:88:5d:
30:39:08:e2:de:89:3c:da:1b:7d:c9:fa:fd:f7:b2:
29:07:95:fe:ce:61:d5:d8:16:49:1f:57:90:65:67:
e2:6c:c3:a0:42:a7:96:b3:16:47:6b:85:17:2e:47:
8e:57:4d:27:ec:bf:d0:3b:15:0e:5a:fc:e1:37:3e:
2a:e7:ab:c6:df:6a:28:a2:0d:75:e7:4e:31:9f:b1:
7d:e5:93:36:9b:94:97:2a:64:7b:14:e6:da:77:e9:
59:10:5b:85:ba:6c:e5:39:47:07:83:fe:dc:e4:77:
e1:3c:02:f1:6e:c7:17:df:40:ce:65:04:bc:17:84:
01:f1:71:de:bc:39:05:a1:01:5c:f8:e1:66:ab:84:
e7:82:08:87:2f:40:e6:ec:bf:5c:d1:1f:e8:3b:95:
dd:88:94:ce:b0:a1:b5:fa:54:de:b7:00:51:2f:27:
0d:e3:6e:9f:84:b5:d8:34:61:3f:83:9f:1f:f2:19:
a2:5f:0d:a2:c1:78:81:95:c1:be:00:c7:a5:07:76:
0c:ad:fd:02:9c:7a:c0:5e:91:0f:4d:b6:92:1f:30:
78:3c:f2:21:86:18:60:8f:f9:26:5e:52:0b:9b:9a:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:51:36:8F:90:DA:7B:7B:FC:C3:B1:07:F8:46:7B:92:34:82:56:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hlE2j5Dae3v8w7EH-EZ7kjSCVr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:12:0c:26:81:9b:01:cb:47:88:ac:8f:b4:4c:4e:b1:04:cd:
8b:dc:6b:ca:2b:ac:45:d8:13:a5:49:8d:23:40:7a:ed:2c:5f:
64:52:e7:c9:91:f0:92:0e:c8:6d:47:57:42:41:b5:04:f4:ec:
24:4e:56:b5:69:73:fe:14:d2:f0:65:7f:42:41:fb:38:3f:b7:
f6:0a:17:48:cf:33:2b:e8:91:3d:79:fd:8f:f8:4d:61:23:35:
4d:2a:17:9d:8b:c0:a7:8b:22:5a:8c:a2:bf:ad:fe:a6:a6:bd:
c9:d0:15:f0:3c:94:9f:ad:40:57:e2:6e:de:a0:52:2b:ac:dc:
52:0d:6c:47:ad:53:e2:20:36:08:ec:a2:4d:91:d6:0b:e5:74:
90:08:e6:8e:08:42:cf:8e:c2:b9:41:fc:91:da:13:8a:c8:b6:
d5:a7:3c:c3:11:ad:7f:8c:cf:7c:68:25:07:e1:b3:cb:35:f8:
49:33:b9:66:6b:a4:77:d3:46:0b:74:aa:93:ce:4f:92:b7:e2:
d1:21:61:df:43:8c:14:8a:ee:5b:c9:3f:6a:f6:32:92:32:67:
4f:4e:73:a8:46:36:54:53:b0:8c:b7:11:51:55:51:85:8f:fb:
f6:db:17:fa:66:80:c6:eb:f2:d7:a8:2b:29:4d:11:a6:09:de:
d5:a3:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:35 2025 by rpki-client